2021

NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length

ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities.

ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover.

Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing.

Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF.

Zoho ManageEngine Desktop Central before build 10.0.683 allows unauthenticated command injection due to improper handlin

In GetTimeStampAndPkt of DumpstateDevice.cpp, there is a possible out of bounds write due to an incorrect bounds check.

A flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0 through 12.0.0). An atta

An information disclosure vulnerability exists in AMD Platform Security Processor (PSP) chipset driver. The discretionar

Cross-site scripting vulnerability due to the inadequate tag sanitization in GROWI versions v4.2.19 and earlier allows r

SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads t

Dada Mail is a web-based e-mail list management system. In affected versions a bad actor could give someone a carefully

Apprise is an open source library which allows you to send a notification to almost all of the most popular notification

Discourse is a platform for community discussion. In affected versions any private message that includes a group had its

The eID Easy WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the error parameter found in the ~/adm

The OptinMonster WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient input validation i

ssh2 is client and server modules written in pure JavaScript for node.js. In ssh2 before version 1.4.0 there is a comman

TI’s BLE stack caches and reuses the LTK’s property for a bonded mobile. A LTK can be an unauthenticated-and-no-MITM-pro

Cross Site Scripting (XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php.

Flask-RESTX (pypi package flask-restx) is a community driven fork of Flask-RESTPlus. Flask-RESTX before version 0.5.1 is

IBM Cloud Pak for Data 2.5 could allow a local user with special privileges to obtain highly sensitive information. IBM

sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expre

IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI M

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vul

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vul

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vul

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vul

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vul

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 stores user credentials in plain clear text whi

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. T

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. T

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. T

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. T

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would

A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function callcode() locat

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function code_dump2() loc

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function code_parse() loc

An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function rfx_alloc() located

Other An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function updateusag

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_FontExtract_

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function pool_lookup_uint

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_GetShapeBoun

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function params_dump() lo

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function parse_metadata()

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_ReadABC() lo

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_DumpABC() lo

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function traits_dump() lo

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function namespace_set_ha